Trojan

IL:Trojan.MSILMamut.5844 malicious file

Malware Removal

The IL:Trojan.MSILMamut.5844 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What IL:Trojan.MSILMamut.5844 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Checks adapter addresses which can be used to detect virtual network interfaces
  • Guard pages use detected – possible anti-debugging.
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Sniffs keystrokes
  • Captures Screenshot
  • Installs itself for autorun at Windows startup
  • Harvests credentials from local FTP client softwares
  • Collects information to fingerprint the system

How to determine IL:Trojan.MSILMamut.5844?



File Info:

name: 2FA4C43AD2019834F518.mlw
path: /opt/CAPEv2/storage/binaries/df8c5f5715d550631d248ba9f7ecc2a232da4e651b936e6ce67c182b187fec00
crc32: 48DBB39F
md5: 2fa4c43ad2019834f5189da2f6bd24b1
sha1: 6e415b43c9d6d82828220c5db2741d898ef0c9df
sha256: df8c5f5715d550631d248ba9f7ecc2a232da4e651b936e6ce67c182b187fec00
sha512: 81ffb4e2813db20903f279b174b130538623e42d9224077000e49524d58e1d88e6214078f8d22368f41adde4ba14e3576f1d90f6f201abb60a1f22b85d387912
ssdeep: 1536:G9+rC1cEdPGh9pEUbkJDrU/lUPykFQaodoeJGz:M++qEdmbkJDYiPykFQaojJGz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13F637D0837D88A95D2FE8BBA95F311404770F53B9563DBAA1CC551AE0E22BC18F41FE6
sha3_384: 77d1d5f95ea4114fba893e0c7bf42499a7d1cab8dd3014308d023a61dc347bc5dcf9acc66ab7eff515413d776b3497e5
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-27 01:46:27


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 3.5.0.0
InternalName: stub.exe
LegalCopyright:  
OriginalFilename: stub.exe
ProductVersion: 3.5.0.0
Assembly Version: 3.5.0.0

IL:Trojan.MSILMamut.5844 also known as:

BkavW32.AIDetectNet.01
MicroWorld-eScanIL:Trojan.MSILMamut.5844
FireEyeGeneric.mg.2fa4c43ad2019834
CAT-QuickHealTrojan.Galaxy.ST3
McAfeeArtemis!2FA4C43AD201
CylanceUnsafe
VIPREIL:Trojan.MSILMamut.5844
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 700000121 )
AlibabaTrojan:MSIL/Injector.d67fd53c
K7GWTrojan ( 700000121 )
Cybereasonmalicious.ad2019
CyrenW32/Trojan.SW.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Spy.Agent.ABJ
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderIL:Trojan.MSILMamut.5844
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
AvastMSIL:Injector-IX [Trj]
Ad-AwareIL:Trojan.MSILMamut.5844
EmsisoftIL:Trojan.MSILMamut.5844 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.MulDrop20.25789
TrendMicroTROJ_GEN.R011C0GGT22
McAfee-GW-EditionBehavesLike.Win32.Generic.kh
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
GDataIL:Trojan.MSILMamut.5844
JiangminTrojan.Generic.aaioz
AviraTR/Dropper.Gen
ArcabitIL:Trojan.MSILMamut.D16D4
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Limitail.R134956
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.34806.em0@aOmZ5Kc
ALYacIL:Trojan.MSILMamut.5844
MAXmalware (ai score=85)
TrendMicro-HouseCallTROJ_GEN.R011C0GGT22
RisingSpyware.Agent!8.C6 (CLOUD)
IkarusTrojan.MSIL.Spy
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.ABJ!tr.spy
AVGMSIL:Injector-IX [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove IL:Trojan.MSILMamut.5844?

IL:Trojan.MSILMamut.5844 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment